Re: [Python-Dev] recursion limit in marshal

2007-05-17 Thread Martin v. Löwis
> The point of this message is to see if anyone thinks 2000 is > unreasonable. It could probably be raised, but I'm not going to try > it since I don't have access to a Windows box. Testing this remotely > sucks. If this turns out ever to be a limitation, I would challenge the reporter to rewrit

[Python-Dev] recursion limit in marshal

2007-05-17 Thread Neal Norwitz
I had a little argument with the marshal module on Windows last night, I eventually won. :-) A patch was checked in which would prevent blowing out the stack and segfaulting with this code: marshal.loads( 'c' + ('X' * 4*4) + '{' * 2**20) Originally, I didn't change the recursion limit which

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread O.R.Senthil Kumaran
* Greg Ewing <[EMAIL PROTECTED]> [2007-05-18 13:06:41]: > > > Site: What is the futorh word of tihs scnnteee? > > Answer: fourth. > > Are you sure it isn't "futorh"?-) > :-) My idea was, a human got to answer it unscrambled as 'fourth' as he "understands" what the question is and gives the pro

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Greg Ewing
O.R.Senthil Kumaran wrote: > Site: What is the futorh word of tihs scnnteee? > > Answer: fourth. Are you sure it isn't "futorh"?-) -- Greg ___ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Tristan Seligmann
* Andrew McNamara <[EMAIL PROTECTED]> [2007-05-17 15:30:43 +1000]: > technique could be used, but my suspicion is that real people are being > paid a pittance to sit in front of a PC and spam anything that moves. http://www.mturk.com/mturk/welcome Complete simple tasks that people do better than

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Georg Brandl
O.R.Senthil Kumaran schrieb: > * Scott Dial <[EMAIL PROTECTED]> [2007-05-17 11:04:46]: > >> However, it may also be because instead of using a graphic (which is >> easily transplanted to another page), it uses ascii art which would >> require more effort to extract and move to another page. > >

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread O.R.Senthil Kumaran
* Scott Dial <[EMAIL PROTECTED]> [2007-05-17 11:04:46]: > However, it may also be because instead of using a graphic (which is > easily transplanted to another page), it uses ascii art which would > require more effort to extract and move to another page. Another approach would be a 'text scram

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Scott Dial
Hrvoje Niksic wrote: > On Wed, 2007-05-16 at 22:17 -0700, Talin wrote: >> Here's a simple method: Put up a free porn site [...] > > Is it known that someone actually implemented this? I moderate a discussion forum which was abused with this exact attack. At the time, it was a phpBB forum which h

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Guido van Rossum
On 5/17/07, Hrvoje Nikšić <[EMAIL PROTECTED]> wrote: > On Wed, 2007-05-16 at 22:17 -0700, Talin wrote: > > Here's a simple method: Put up a free porn site [...] > > Is it known that someone actually implemented this? It's a neat trick, > but as far as I know, it started as a thought experiment of

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Greg Ewing
Talin wrote: > Here's a simple method: Put up a free porn site, with a front page that > says "you must be 18 or older to enter". The page also has a captcha to > verify that you are a real person. But here's the trick: The captcha is > actually a proxy to some other site that the spammer is try

Re: [Python-Dev] Summary of Tracker Issues

2007-05-17 Thread Hrvoje Nikšić
On Wed, 2007-05-16 at 22:17 -0700, Talin wrote: > Here's a simple method: Put up a free porn site [...] Is it known that someone actually implemented this? It's a neat trick, but as far as I know, it started as a thought experiment of what *could* be done to fairly easily defeat the captchas, as